Critical infrastructure providers, including those in the water, power, and banking sectors, are likely to be compromised by state-sponsored cyberattacks in the event of a military conflict with a peer adversary. The Cybersecurity and Infrastructure Security Agency (CISA) is urging these entities to develop operational technology resilience plans to ensure continuity of essential services during potential internet outages. This warning comes as CISA officials acknowledge the likelihood of successful cyberattacks on vital U.S. infrastructure, emphasizing the need for providers to be prepared to operate offline1. The agency's remarks highlight the importance of proactive planning and investment in cybersecurity measures to mitigate the impact of such attacks. As a result, technology organizations must reassess their compliance posture in light of CISA's policy developments, which may introduce new requirements for ensuring the resilience of critical infrastructure. This matters to practitioners because it underscores the need for robust contingency planning to maintain business continuity in the face of escalating cyber threats.